Getting Data In

How to automate a silent installation of a Splunk universal forwarder on Solaris using the PKG file?

chawagon03
Path Finder

Hello fellow Splunkers,

Have any of you been able to install Splunk Universal Forwarder on Solaris using the PKG file? I'm trying to script it so that it is installed silently without any interactions. Has anyone been able to achieve this?

Might be a basic one, but can't seem to find that answer anywhere.

0 Karma
1 Solution

chawagon03
Path Finder

I actually solved my own question after I posted this. Read on pkgadd running as silent and you have to create an 'admin' file to go with it. So the actual command that I used is

pkgadd -a <path to admin file> -d <path to splunk package> all

and the admin file that you have to create looks like this

mail=
instance=overwrite
partial=nocheck
runlevel=nocheck
idepend=nocheck
rdepend=nocheck
space=nocheck
setuid=nocheck
conflict=nocheck
action=nocheck
basedir=default

I don't have any file extension, just called it 'admin'

Hope this helps anyone else wanting to install on Solaris using pkgadd method.

View solution in original post

RMcCurdyDOTcom
Explorer

got nasty gram for posting links

search online for freeload101 github   in scripts Splunk_UniversalForwarder_Installer.bash

got nasty gram for posting links

search online for freeload101 github   in scripts Splunk_UniversalForwarder_Installer.bash
0 Karma

chawagon03
Path Finder

I actually solved my own question after I posted this. Read on pkgadd running as silent and you have to create an 'admin' file to go with it. So the actual command that I used is

pkgadd -a <path to admin file> -d <path to splunk package> all

and the admin file that you have to create looks like this

mail=
instance=overwrite
partial=nocheck
runlevel=nocheck
idepend=nocheck
rdepend=nocheck
space=nocheck
setuid=nocheck
conflict=nocheck
action=nocheck
basedir=default

I don't have any file extension, just called it 'admin'

Hope this helps anyone else wanting to install on Solaris using pkgadd method.

Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...